Skip to content

fix: bump fast-xml-parser to 5.10.1 via pnpm override - #558

Open
LukasHirt wants to merge 1 commit into
mainfrom
chore/bump-fast-xml-parser
Open

fix: bump fast-xml-parser to 5.10.1 via pnpm override#558
LukasHirt wants to merge 1 commit into
mainfrom
chore/bump-fast-xml-parser

Conversation

@LukasHirt

Copy link
Copy Markdown
Collaborator

Summary

  • Pin fast-xml-parser to 5.10.1 via a pnpm.overrides entry (same pattern as the existing jsonpath-plus and @uppy/core overrides)
  • It's a transitive dependency pulled in via @ownclouders/web-client and webdav, both already at their latest published versions, so the override is needed until upstream bumps their own declared range

Test plan

  • pnpm install resolves fast-xml-parser to 5.10.1 everywhere in the lockfile
  • pnpm --filter web-app-cast build succeeds

fast-xml-parser is pulled in transitively via @ownclouders/web-client
and webdav, both already at their latest published versions, so pin
the newer patch release with a pnpm override until upstream bumps
their own range.

Signed-off-by: Lukas Hirt <info@hirt.cz>
@LukasHirt
LukasHirt requested a review from a team as a code owner August 20, 2026 13:48
@LukasHirt LukasHirt self-assigned this Aug 20, 2026
@kw-security

kw-security commented Aug 20, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants